Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bed6863-e2ba-369b-b334-0ff7fd605662.roa
File: 2bed6863-e2ba-369b-b334-0ff7fd605662.roa (raw, json)
Hash identifier: XfzmTL3EjRYvEpwnJVDTHq47ZEVqyUggK+sXEnnSNSA=
Subject key identifier: 68:B9:A2:91:80:44:B8:3C:D7:87:86:82:12:42:02:3F:A4:24:EF:1D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404B4E96F33E562A4DBF1CE980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bed6863-e2ba-369b-b334-0ff7fd605662.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.158.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:4e:96:f3:3e:56:2a:4d:bf:1c:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=aaf3d159-0b87-4603-93d3-f673edf588d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:7e:9d:1b:c5:e8:39:33:28:4f:5f:cf:9c:
17:54:5b:50:72:88:f6:1c:9a:07:c1:18:4b:a8:eb:
e9:dc:d2:3a:11:d8:d0:6d:63:e8:6a:fb:cf:f2:15:
92:d1:0b:51:8a:20:65:c9:10:91:0a:b1:50:e8:0f:
20:c5:f6:fe:2b:03:05:72:d9:cb:4b:ec:d1:cd:6b:
97:be:18:b5:8c:64:a1:9d:2f:60:11:16:cc:20:c9:
61:d8:57:38:4e:fc:5a:c3:fa:94:0b:f1:5c:c1:03:
0c:cb:f3:2e:47:fa:26:a7:df:85:53:c7:5b:b0:cd:
d9:4a:8f:58:29:87:d9:fc:89:45:37:37:fd:27:07:
e5:63:21:c1:ae:13:b5:fd:b1:b5:87:c2:0c:f8:f5:
44:9e:f4:05:34:53:11:ea:77:34:79:e6:1f:fd:43:
36:ed:83:ee:e6:f8:17:08:2a:a5:88:b3:99:a6:5b:
67:42:ad:e4:aa:ee:68:71:7c:5f:00:b7:a5:da:b9:
22:fc:5d:39:bc:be:7c:33:6a:b2:3a:54:72:1d:4b:
ff:66:9b:b0:f8:aa:54:22:1a:a8:1b:14:69:38:f9:
be:85:f2:1f:8f:6b:0a:70:c9:7f:73:87:93:27:f6:
8c:50:dc:6a:25:0d:22:15:9c:60:4a:a9:14:2b:7a:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B9:A2:91:80:44:B8:3C:D7:87:86:82:12:42:02:3F:A4:24:EF:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bed6863-e2ba-369b-b334-0ff7fd605662.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.158.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:f1:16:fe:4b:88:ed:90:b1:50:60:4b:ce:5f:75:6a:cc:55:
b3:f8:7a:ee:88:61:7e:8b:3b:82:a9:36:7b:5f:4b:3c:5e:df:
cd:33:e8:e3:df:12:78:99:8c:cd:45:fd:01:96:8e:4d:68:b1:
81:78:52:a5:6f:35:5d:e9:72:d7:5c:1f:f3:26:01:d1:78:5c:
83:e6:ba:57:ec:fd:7f:d1:3a:53:2a:5a:02:29:72:30:e7:a6:
4d:ca:e3:0c:83:a7:84:ef:66:1c:fc:d4:c6:24:fa:9c:ff:51:
57:26:a9:d5:91:64:9c:f3:45:83:31:6a:7f:b6:9c:1a:d9:9e:
f5:62:6b:c8:d3:0b:39:8c:7b:7b:ea:9a:fe:77:2b:43:b8:14:
05:2e:75:d1:e7:ea:08:2a:13:f0:44:a1:4f:b4:de:11:9c:f3:
08:fc:1f:53:c4:57:79:52:01:02:cc:c0:a9:4d:72:6d:c5:cb:
d2:1c:c1:22:08:42:7a:02:db:58:1f:dd:ae:9f:2c:ef:a9:bf:
15:a7:5e:33:2e:27:c2:98:d2:c7:52:6a:f2:13:12:50:fc:43:
38:56:77:ef:6b:ac:95:1b:d9:89:74:75:b6:6a:71:d5:0a:a7:
3c:dc:ca:6c:fd:a7:08:d0:72:7f:a9:09:b4:94:e5:0b:f7:fc:
88:61:f9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:55 2025 by rpki-client